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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please AMEND the claims in accordance with the following: 
1 . (Currently amended) A security system comprising; 

an information management system that manages information and an encryption support 
system that supports encryption of the information and in network communication with the 
information management system, 

the encryption support system including an encryption rule storing portion that stores rule 
information that indicates an encryption rule for each secret level, and 

the information management system including a classification secret level storing portion 
that stores a classification of the information in connection with a secret level for each 
classification as a secret level classification of information, 

the encryption support system further including an encryption data transmitting portion 
that transmits encryption data that is necessary for encrypting the information in accordance with 
the encryption rule for a secret level over the network to the information management system, 

the information management system further including: 

an encryption data receiving portion that receives the encryption data over the 
network from the encryption support system, 

an encryption portion that specifies the secret level classification of the 
information and encrypts the information by using the received encryption data for the encryption 
rule of the specified secret level classification of the information, 

an information storing portion that stores the encrypted information, and 
a process information transmitting portion that transmits process information over 
the network to the encryption support system, the process information indicating an encryption 
process performed for the specified secret level classification of the information by the encrypting 
portion, and 

the encryption support system further including: 

a process information receiving portion that receives the process information T 
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wh i ch i nd i cat e s an e ncrypt i on proc e ss p e rform e d by th e i nformat i on manag e m e nt syst e m, over 
the network from the information management system, 

a monitoring portion that monitors by confirming whether the information 
management system encrypted the information in accordance with the encryption rule of the 
specified secret level classification of the information, based upon the process information 
received over the network from the information management system, and 

a warning portion that warns the information management system over the 
network, if the monitoring portion has determined that the information is not encrypted in 
accordance with the encryption ruler-ane 1 

th e i nformat i on manag e m e nt syst e m i nc l ud i ng 

an e ncrypt i on data r e c ei v i ng portion that r e c ei v e s th e e ncrypt i on data ov e r th e 

n e twork from th e e ncrypt i on support syst e m, 

a c l ass i f i cat i on s e cr e t le v el storing port i on that stor e s c l ass i f i cat i on of th e 

i nformat i on i n conn e ct i on w i th a s e cr e t le v el for each c l ass i f i cat i on, 

an e ncrypt i ng port i on that sp e cif i es th e c l ass i f i cat i on of th e i nformat i on and 

e ncrypts th e i nformat i on by us i ng th e r e c ei v e d e ncrypt i on data of th e s e cr e t le v el for th o sp e c i f ie d 
c l ass i f i cat i on, 

an i nformat i on st o r i ng port i on that stor e s th e e ncrypt e d i nformat i on, and 

a proc e ss i nformat i on transm i tt i ng port i on that transm i ts th e proc e ss i nformat i on 

ov e r th e n e twork to th e e ncrypt i on support syst e m . 

2. (Previously Presented) The security system according to claim 1 , wherein the rule 
information indicates, as the encryption rule, a rule about cryptography and a valid term of an 
encryption key for encrypting the information, 

if a period from the encryption process of the information to the present time exceeds the 
valid term for the encryption rule of the secret level for the classification of the information, the 
warning portion warns the information management system, 

if the cryptography of the encryption rule is changed, the encryption data transmitting 
portion transmits the encryption data for performing encryption in accordance with the changed 
cryptography to the information management system, and 

the warning portion warns the information management system to encrypt the information 
in accordance with the changed cryptography. 

3. (currently amended) The security system according to claim 1 , wherein the 
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information management system includes 

a classification secret level transmitting portion that transmits a secret level classification 
s e cr e t le v elof information, which indicates thea classification and thea secret level for the 
classification, over the network to the encryption support system, and 

the monitoring portion of the encryption support system monitors whether the information 
is encrypted in accordance with the encryption rule by the information management system 
based upon the process information received over the network from the information management 
system by comparing the received process information with the received c l ass i f i cat i on secret 
level classification of the information. 

4. (Previously Presented) The security system according to claim 1 , further 
comprising a valid term managing portion that manages a valid term of a certification for affixing 
an electronic signature to the information, wherein 

the monitoring portion monitors whether or not it is necessary to affix a different electronic 
signature to the information in accordance with the valid term of the certification, and 

the warning portion warns the information management system to affix the different 
electronic signature to the information if it is decided that it is necessary to affix the different 
electronic signature. 

5. (Previously Presented) An information management system that manages 
information and receives support for encrypting information from an encryption support system in 
a network communication with the information management system, comprising: 

a receiving portion that receives rule information, which indicates an encryption rule for 
each secret level and encryption data necessary for encrypting the information in accordance 
with the encryption rule, over the network from the encryption support system; 

a classification secret level storing portion that stores classification of the information in 
connection with a secret level; 

an encrypting portion that specifies the classification of the information and encrypts the 
information by using the received encryption data of the secret level for the specified 
classification; 

an information storing portion that stores the encrypted information; and 
an encryption process confirmation portion that confirms whether the encryption of the 
information was performed in accordance with the encryption rule by transmitting, over the 
network to the encryption support system, process information indicating the encryption process 
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performed by the encrypting portion and receives a confirmation result from the encryption 
support system. 

6. (Previously Presented) An encryption support system that encrypts information 
and supports an information management system that manages information and is in 
communication over a network with the encryption support system, the encryption support 
system comprising: 

an encryption rule storing portion that stores rule information that indicates an encryption 
rule for each secret level; 

a transmitting portion that transmits encryption data that is necessary for encrypting the 
information in accordance with the encryption rule over the network to the information 
management system; 

a receiving portion that receives process information, which indicates the encryption 
process performed by the information management system, over the network from the 
information management system; 

a monitoring portion that monitors by confirming whether the information management 
system encrypted the information in accordance with the encryption rule based upon the process 
information received over the network from the information management system; and 

a warning portion that warns the information management system over the network, if the 
monitoring portion has determined that the information is not encrypted according to the 
encryption rule. 

7. (Previously Presented) The encryption support system according to claim 6, 
further comprising a validity monitoring portion that monitors validity of an encryption rule that is 
used currently in accordance with vulnerability information about vulnerability of security received 
from a security information providing portion, wherein 

the transmitting portion transmits the encryption data for changing the encryption rule 
appropriately, to the information management system over the network, if decided that the 
encryption rule used currently has low validity. 

8. (Previously Presented) A computer-readable storage storing a program 
supporting encryption of information for an information management system that manages 
information, the program causing a computer, which is in a network communication with the 
information management system, to execute a process comprising: 
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transmitting an encryption rule for each secret level and encryption data that is necessary 
for encrypting the information in accordance with the encryption rule over the network to the 
information management system; 

receiving process information, which indicates an encryption process performed by the 
information management system, over the network from the information management system; 

monitoring by confirming whether the information management system encrypted the 
information in accordance with the encryption rule based upon the process information received 
over the network from the information management system; and 

warning the information management system over the network, if the monitoring 
determines the information is not encrypted in accordance with the encryption rule. 

9. (currently amended) A method, comprising: 

transmitting, over a computer network, an encryption rule for a security level to an 
information management computer; 

monitoring by confirming whether the information management system encrypted the data 
in accordance with the transmitted encryption rule for the security level; and 

warning the information management system over the network, if the data is not 
encrypted in accordance with the encryption rule. 

10. (cancelled) 

1 1 . (Previously Presented) A security system comprising an information management 
system that manages and encrypts information and an encryption support system that is in a 
network communication with the information management system and that supports encryption of 
the information performed by the information management system, 

the encryption support system comprising: 

an encryption rule storing portion that stores rule information that indicates an 
encryption rule for each encryption rank corresponding to an importance of information under an 
encryption policy, 

an encryption data transmitting portion that transmits encryption data that is 
necessary for encrypting the information in accordance with the encryption rule over the network 
to the information management system, 

a process information receiving portion that receives process information, which 
indicates an encryption process performed by the information management system, over the 
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network from the information management system, 

a monitoring portion that monitors by confirming whether the information 
management system encrypted the information in accordance with the encryption rule based 
upon the process information received over the network from the information management 
system, and 

a compliance portion that orders the information management system over the 
network, if the monitoring portion determines the information is not encrypted in accordance with 
the encryption rule, to encrypt the information in accordance with the encryption rule, and 
the information management system comprising: 

an encryption data receiving portion that receives the encryption data over the 
network from the encryption support system, 

an encryption rank classification storing portion that stores classification of 
information in connection with an encryption rank for each classification, 

an encrypting portion that specifies the classification of the information and 
encrypts the information by using the received encryption data of the encryption rank for the 
specified classification, 

an information storing portion that stores the encrypted information, and 

a process information transmitting portion that transmits the process information 
over the network to the encryption support system. 
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